CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ad277553f58ab2c190799f74444e9b1f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
ad277553f58ab2c190799f74444e9b1f_JaffaCakes118
Size
88KB
MD5
ad277553f58ab2c190799f74444e9b1f
SHA1
52ea4f95f9e9bee027e7718b82c3d43a0dea4b16
SHA256
e18bb15281151b7d477c5008cdea6c44f74bd811e22e67f64d8192dbb0c5cee5
SHA512
69041c1af7c2a2103527d98747bfc26d0f5a4569ca1a6e3a352938611cc4e0caacefa6c46177e8595630fe5c614a3114b9c5fcd3a59f8bda9808169fc453ae59
SSDEEP
1536:LmSQNbJE1vj8gDxkOoO04W02gEG+C+dhAbr2L:LmFty1L8gDyOoUW0OZdhX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ad277553f58ab2c190799f74444e9b1f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE